$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft File: 53B0CEC9D00981686264164126DB6F3385680024.mft (raw, json) Hash identifier: pKFwojLUa6u67nL1DEGe5iNGoa4PhbnadRsiZCRie80= Subject key identifier: 88:2E:F4:0F:25:63:D7:6A:B1:3A:90:79:D2:6F:F3:EC:E3:DA:52:1A Authority key identifier: 53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24 Certificate issuer: /CN=53B0CEC9D00981686264164126DB6F3385680024 Certificate serial: 7F47C1C7A8DCDC6F289535D3FFDCBA70C9A869FF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft Manifest number: C7 Signing time: Mon 12 Oct 2026 03:01:21 +0000 Manifest this update: Mon 12 Oct 2026 02:56:21 +0000 Manifest next update: Thu 15 Oct 2026 10:50:21 +0000 Files and hashes: 1: 34392e3233392e3139322e302f31382d3138203d3e203137383136.roa (hash: ZzmzODzaCB8s1IKPJOR3kgAoZF7CG5/EOXrTUM6+kBo=) 2: 3131392e34302e3132382e302f31372d3137203d3e203538383334.roa (hash: 1DmuiOPq4TEZCmPUH8eAmnwG9L8yZKBYkchb9eK5PEs=) 3: 53B0CEC9D00981686264164126DB6F3385680024.crl (hash: fBfoIiwAFeCJ9IE9tJwuekInEij5YT/pa7C86c7A/ag=) 4: 34392e3233392e3139322e302f31382d3138203d3e203538383334.roa (hash: ec5yDLpeyWMgWUg4UNjd9N/J72lkvu3GkBAQZSij1hQ=) 5: 3231392e3233352e31362e302f32302d3230203d3e203538383334.roa (hash: r6KqIfOL8ifKdsPunCCm1mAP8gnrhN32td99CTh9X4I=) 6: 3231392e3233352e3230382e302f32302d3230203d3e203538383334.roa (hash: jkg6tUZ7+qXk3FouI03XOahA6TPu6n/Kjb5AdiASdbY=) 7: 3131392e34322e302e302f31392d3139203d3e203538383334.roa (hash: UypYF6EVHxU0/wisde4zLRsNmq03Ct0ZuhmxCmXu5gs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:47:c1:c7:a8:dc:dc:6f:28:95:35:d3:ff:dc:ba:70:c9:a8:69:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53B0CEC9D00981686264164126DB6F3385680024 Validity Not Before: Oct 12 02:56:21 2026 GMT Not After : Oct 15 10:50:21 2026 GMT Subject: CN=882EF40F2563D76AB13A9079D26FF3ECE3DA521A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:96:70:28:d5:a4:0d:f4:3a:f1:81:a8:be: b9:21:b8:5f:d4:84:6f:b0:6d:7d:e4:48:82:21:68: 5d:8b:2d:9b:37:84:75:4e:7e:b1:df:f1:80:50:27: 13:30:c1:d6:35:4a:b9:af:72:7b:a7:40:06:d1:c1: 7f:1d:39:22:7e:36:bd:81:34:ae:65:2e:e5:87:29: 28:57:4b:cf:b9:bb:af:ab:3a:3d:8f:30:48:ea:4e: b0:a5:8b:d4:50:e5:b0:5e:57:0c:f5:32:de:d8:93: 02:b8:5f:92:0c:f1:b5:d5:46:59:50:04:39:18:c0: 52:81:f5:54:27:63:b3:00:e9:5a:0c:11:23:d4:2e: fa:64:8c:66:31:75:07:dd:ec:fe:29:60:bb:61:0f: f3:1b:9e:d2:4e:da:a2:85:34:25:ac:45:6a:d5:0e: 9d:f4:79:b5:57:2b:84:31:f1:cf:21:87:0e:8c:44: c7:ea:f3:df:7b:8b:1d:1f:4b:90:e8:14:f1:b4:d5: ad:5d:13:71:8b:e2:89:16:77:a0:94:93:6b:fd:8b: 52:46:8c:4a:8c:ff:15:66:2f:a4:84:9f:ea:97:ef: cf:c5:90:33:18:f1:e1:6a:11:be:33:00:cc:89:4b: a3:6c:6e:ab:b9:0b:ed:d1:ed:21:ec:da:ce:50:38: 5f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2E:F4:0F:25:63:D7:6A:B1:3A:90:79:D2:6F:F3:EC:E3:DA:52:1A X509v3 Authority Key Identifier: keyid:53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:97:fd:d4:33:c5:50:89:b8:a5:9e:70:1b:c4:5a:3e:5b:be: de:5d:c4:99:86:4f:76:82:dd:4a:41:a9:b6:d2:4b:ee:3c:cf: 90:ad:18:11:c8:db:07:34:b1:df:87:b8:52:8e:98:d4:ee:15: 44:bd:01:48:7f:78:9e:1a:00:a4:0a:4f:3a:f3:f7:c4:09:8b: 06:17:8c:d7:70:7b:4e:c4:3f:a2:fe:55:78:28:de:06:56:86: 03:03:0a:76:c2:05:52:05:97:f1:ad:a7:b1:7b:c0:0f:5d:93: 09:3c:7d:7b:47:9c:61:66:cd:67:a4:df:cb:4b:a4:13:1a:b4: 85:71:d7:ab:8d:e0:49:ab:df:a1:d5:43:28:7b:01:b8:a8:c0: 34:8c:05:43:1d:8c:20:b1:68:dc:a1:78:44:0f:ac:5b:87:e0: fc:4e:ee:13:03:52:0a:a9:3a:b4:ad:ae:66:15:10:88:ae:48: a0:b8:c9:fc:1b:17:0b:aa:96:76:3c:4a:8c:9b:21:0a:25:68: a8:93:d6:a9:83:cd:bd:7a:66:4e:21:40:52:e7:a1:4e:3f:e4: 48:55:cb:53:74:03:9f:cd:29:aa:b1:24:74:8a:b5:6c:bc:f8: e9:8d:2e:ca:7c:95:c4:17:d3:1e:a7:15:1a:36:79:ae:d0:ea: 90:e1:7e:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf0fBx6jc3G8olTXT/9y6cMmoaf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCMENFQzlEMDA5ODE2ODYyNjQxNjQxMjZEQjZGMzM4 NTY4MDAyNDAeFw0yNjEwMTIwMjU2MjFaFw0yNjEwMTUxMDUwMjFaMDMxMTAvBgNV BAMTKDg4MkVGNDBGMjU2M0Q3NkFCMTNBOTA3OUQyNkZGM0VDRTNEQTUyMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HJZwKNWkDfQ68YGovrkhuF/U hG+wbX3kSIIhaF2LLZs3hHVOfrHf8YBQJxMwwdY1SrmvcnunQAbRwX8dOSJ+Nr2B NK5lLuWHKShXS8+5u6+rOj2PMEjqTrCli9RQ5bBeVwz1Mt7YkwK4X5IM8bXVRllQ BDkYwFKB9VQnY7MA6VoMESPULvpkjGYxdQfd7P4pYLthD/MbntJO2qKFNCWsRWrV Dp30ebVXK4Qx8c8hhw6MRMfq8997ix0fS5DoFPG01a1dE3GL4okWd6CUk2v9i1JG jEqM/xVmL6SEn+qX78/FkDMY8eFqEb4zAMyJS6Nsbqu5C+3R7SHs2s5QOF+XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiC70DyVj12qxOpB50m/z7OPaUhowHwYDVR0j BBgwFoAUU7DOydAJgWhiZBZBJttvM4VoACQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA2MDEwNTEzNzk0NjYyNS8wLzUzQjBDRUM5RDAwOTgxNjg2MjY0MTY0MTI2REI2 RjMzODU2ODAwMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTNCMENFQzlEMDA5ODE2ODYyNjQxNjQxMjZEQjZGMzM4NTY4MDAyNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNjAxMDUxMzc5NDY2MjUvMC81M0IwQ0VDOUQwMDk4 MTY4NjI2NDE2NDEyNkRCNkYzMzg1NjgwMDI0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJf91DPFUIm4 pZ5wG8RaPlu+3l3EmYZPdoLdSkGpttJL7jzPkK0YEcjbBzSx34e4Uo6Y1O4VRL0B SH94nhoApApPOvP3xAmLBheM13B7TsQ/ov5VeCjeBlaGAwMKdsIFUgWX8a2nsXvA D12TCTx9e0ecYWbNZ6Tfy0ukExq0hXHXq43gSavfodVDKHsBuKjANIwFQx2MILFo 3KF4RA+sW4fg/E7uEwNSCqk6tK2uZhUQiK5IoLjJ/BsXC6qWdjxKjJshCiVoqJPW qYPNvXpmTiFAUuehTj/kSFXLU3QDn80pqrEkdIq1bLz46Y0uynyVxBfTHqcVGjZ5 rtDqkOF+9A== -----END CERTIFICATE-----Generated at Mon Oct 12 09:55:54 2026 by rpki-client